IN THE CLAIMS 

1 . (Currently Amended) A method for generating an undeniable signature (y\,..., y t ) on a 
set of data, the method comprising the following steps: 

[[-]] transforming the set of data [[(m)]] to a sequence of a predetermined number [[(t)]] 
of blocks ,]] * t ), the[[se]] blocks being members of an Abelian group, [[this]] die 

transformation being a one way function[M1 ; and 

[[-]] applying to each block [[(xO]] a group homomorphism [[(f)]] to obtain a resulting 
value [[(yOH, in which a number of elements of an initial group [[(G)]] is larger than the number 
of elements [[(d)]] of a destination group [[(H)]]. 

2. (Currently Amended) The method of claim 1, wherein the initial group [[(G)]] is 
formed by a set of invertible integers modulo n, [[i.e.]] denoted as Z* 

3. (Currently Amended) The method according to claim 2, wherein the group 
homomorphism [[(f)]] computation is based on computation of a residue character (x) on [[a]] 
the set of e lements invertible integers 2* • 

4. (Currently Amended) The method according to claim 3, wherein the residue character 
(x) computation [[in]] is based on a parameter (71) serving as a key. 

5. (Currently Amended) The method according to the claim 4, wherein this key 
parameter (71) is determined suchao by: 71 • ^ = n, ^ being the complex conjugate of %. 

6. (Currently Amended) The method according to claim 2, wherein the group 
homomorphism [[(f)]] computation is determined [[in]] by raising an element of z* to the power 
of r(q-l), in which n=p»q such that p = rd+ 1 and q are prime, gcd(r, d) = \, gcd(q -\,d) = l, 
then by computing a discrete logarithm. 
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7. (Original) The method according to claim 6, wherein the group homomorphism is 
calculated using a factorization of n. 

8. (Currently Amended) The method according to claim 1, wherein the length of the 
signature is dependent of the number of elements of the destination group [[(d)]] and the number 
of blocks [[(t)]]. 

9. (Currently Amended) The method according to claim 4, wherein the parameter [[(71)]] 
is a secret key on an asymmetric public/secret key pair public/s e crot . 

10. (Currently Amended) A [[M]]method of confirming by a Verifier an undeniable 
signature (y u y t ) of a set of data [[(m)]] generated by a Signer taking into account a predefined 
security parameter [[(k)]] of the confirmation protocol, this Signer having a public/secret key 
pair, this method comprising the following steps: 

[[-]] obtaining a personal value (p) from the Signer, this personal value being part of the 

public key (G, H, d, p, (e u ... e s )) of the Signer[[,]]_; 

[[-]] extracting a first sequence of elements (e u ... e s ) from the public key[[,]]j 
[[-]] generating a second sequence of elements (g u ... g s ) from the personal value (p)[[,]]_i 
[[-]] generating a third sequence of elements (xi, x t ) from the set of data (m)[[,]]_i 
[[-]] randomly picking challenge parameters n e G and ay s Z d for i = 1, ... , k and j = 1, 
s + 1 and computing a challenge value u ; = dr ; + a n gi + ... a is g s + aj s +![[y]]xi + ... + 

a is +t[[y]]xt[[,]U 

[[-]] sending by the Verifier the challenge value uj to the Signer[[,]]_; 
[[-]] receiving from the Signer a commitment value (<Vj>), this commitment value (<v ; >) 
being calculated by the Signer based on a response value v s = f(Uj)[[,]]_i 

[[-]] sending by the Verifier the challenge parameters r ; and ay to the Signer[[,]]^ 
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[[-]] verifying by the Signer whether Uj = dr; + a n gi + ... a is g s + a is +i[[y]]xi + ... + 
a is+t[[y]]xt, and in the positive event, opening by the Signer the commitment on the response 
value (Vi)rMl : and 

[[-]] verifying by the Verifier whether Vj = anei + ... a is e s + a is +iyi + ... + a is + t y t . 

1 1 . (Currently Amended) A method for denying to a Verifier by a Signer on an alleged 
non-signature (zl , zt) of a set of data (m), this signature being supposedly generated 
according to claim 1 by the Signer, this Signer having a public/secret key pair, this method 
taking into account a predefined security parameter (£ ) of the denial protocol and comprising the 
following steps: 

[[-]] obtaining by the Verifier a personal value (p) of the Signer, this personal value being 
part of the public key (G, H, d, p, (e u ... e s )) of the Signer[[,]]_L 

[[-]] extracting by the Verifier a first sequence of elements (e h ... e s ) from the public 
key[[,]L 

[[-]] generating by the Verifier and the Signer a second sequence of elements (gi, ... g s ) 
from the personal value (p)[[,]]_i 

[[-]] generating by the Verifier and the Signer a third sequence of elements (xi, xO 
from the set of data (m)[[,]]j 

[[-]] calculating by the Signer [[the]] a true signature (y,,..., y t )[[,]]_Land 

[[-]] repeating the following steps I times, I being the predetermined security 
parameter[[,]]_; 

[[-]] randomly picking by the Verifier challenge parameters rj s G and aji 8 Z d for i 
= 1, ... , s and j = 1, t and 1 e Z* where p is the smallest prime dividing d[[,]]j 



[[-]] computing uj := drj + ajig! + ... a^gs +Xx h and wj := ajid + ... a js e s +Xq for j 
=l...t[[,]]j 

[[-]] sending by the Verifier the challenge values uj and wj to the Signer[[,]]j 
[[-]] computing by the Signer a response test value TVj := (Zj-yj)»_i 
[[-]] for each j = 1 to t, determining whether the test value TVj =0[[,]]_i 
[[-]] in the negative event, calculating a test parameter Xj according to the 

following formula : wj-Vj, = Xj (zj-yj)j 

[[-]] determining an intermediate value [[IV]] (TV) , [[this]] the intermediate value 

(IV) being equal to one valid test parameter [[X]] Q£ and in case of no valid test 

parameter is found, selecting as the intermediate value {IV} a random value[[,]]_; 

[[-]] sending a commitment value CT based on the intermediate value [[IV]] {IV}, 

to the Verifier[[,]]_: 

[[-]] sending by the Verifier the challenge parameters rj , ajj and test parameter 

[[X]] &} to the Signer[[,]]j 

[[-]] verifying by the Signer whether uj - drj + ajjgi + ... a js g s + Xx } and wj := ajid 

+ ... a js e s + Xzj for j = 1 ... t hold, in the positive event, the Signer opens the commitment 

on the intermediate value (IV) to the Verifier[[.ll ; and 

[[-]] verifying by the Verifier that the test parameter [[X]] 0} is equal to the 

intermediate value [[IV]] {IV}. 

12. (Currently Amended) The method of claim 1 1, in which the determination of the 
valid test parameter comprises [[the]] a check whether (wj-Vj,) and (zj-yj) are not equal to 0. 
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13. (Currently Amended) The method of claim 1 1, in which j > 1, the determination of 
the valid test parameter comprises [[the]] a check whether (wj-vj) and (zj-yj) are not equal to 0, 
and that all of the test parameters are the same. 
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